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DESCRIPTION 
COMMUNICATION CONTROL SYSTEM 

TECHNICAL FIELD 
[0001] 

The present invention relates to a communication control 
system used for a distributed control system or the like. 
BACKGROUND ART 
[0002] 

The distributed control system is used for plant 
operation control in a wide variety of fields such as 
petrochemistry, steel, paper pulp, foods, pharmaceuticals, 
and electric power. 
[0003] 

Fig. 1 shows an exemplary configuration of a general 
distributed control system. 

Referring to Fig. 1, an operation monitoring apparatus 
1 and a controller 2 are connected to a control bus 3. The 
controller 2 controls a plant 4 under the monitoring of the 
operation monitoring apparatus, 1. The operation monitoring 
apparatus 1 is in charge of operation and monitoring of the 
plant. The operation monitoring apparatus 1 displays a screen 
to perform control operation and monitoring. In accordance 
with the scale of the plant, a plurality of controllers are 
distributed across the plant. The operation monitoring 



apparatus 1 and the controller 2 communicate with each other 

to control the plant via the control bus 3. 

[0004] 

Sensor devices 5, 6 present in the plant 4 detects the 
5 process values of temperature, pressure and liquid level. 
Valves 7, 8 have their throttle opening controlled by an 
operation signal given by the controller 2. An analog signal 
of 4 to 20mA and 1 to 5V output from the sensor devices 5, 6 
is input to the controller 2. Based on this input, a control 
10 unit (not shown) in the controller 2 performs control 
arithmetic operation and obtains an operation amount. The 
operation amount is output as an analog signal of 4 to 20mA 
and 1 to 5V, which controls the throttle opening of the valves 
7, 8. For example, by controlling the valve throttle opening 
15 of a reaction oven the process amount of temperature or pressure 
is controlled. 
[0005] 

The control bus of a conventional distributed control 
system is a bus dedicated to process control. The protocol 

20 for the control bus is a protocol dedicated to process control. 
In recent years, remarkable progress in IT (Information 
Technology) or web-related technologies has presented a need 
for the open architecture of the control bus for a distributed 
control system. As a request for the open architecture, a 

25 request for a network that is based on Ethernet (registered 
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trademark) is on the rise. 

With this background, it is under study to apply 
Industrial Ethernet (registered trademark) to the control bus 
for a distributed control system. 
[0006] 

The Patent Reference 1 describes a communication control 
system that employs a redundant configuration of a network 
adapter transparent to a user application program when a 
communication station communicating over the TCP/IP 

(Transmission Control Protocol/Internet Protocol) is 
connected to Ethernet (registered trademark) . 

[0007] 

Patent Reference 1: JP-A-11-205356 

[0008] 

Industrial Ethernet (registered trademark) does not 
currently satisfy the real time property or reliability 
requested in process control so that it is difficult to provide 
such a communication control system. 
[0009] 

In a conventional system, it is difficult to implement 
open protocol communications while assuring real time property 
and reliability from the following circumstances: 
(a) communications over a standard protocol that is based on 
Ethernet (registered trademark) or TCP/IP (Transmission 
Control Protocol/Internet Protocol) do not sufficiently 



satisfy the needs for real time property and reliability when 
used in industrial applications such a process control, 
(b) Communications over a unique dedicated protocol for 
attaining real time property and reliability have only 
5 insufficient compatibility when connected to another system 
or when a network device or software widely available on the 
market is used. This does not sufficiently meet the request 
for open protocol communications. 
[0010] 

10 The invention has been accomplished in order to solve 

the problems. An object of the invention is to provide a 
communication control system capable of performing 
communications that satisfy real time property, high 
reliability and a need for open protocol communications by 
15 introducing in the same communication station critical 

communication section for providing real time property and high 

reliability as open communication section. 

DISCLOSURE OF THE INVENTION 

[0011] 

20 In order to solve the problems, the invention is 

configured as follows: 
[0012] 

(1) A communication control system for controlling 
communications performed between a plurality of communication 
25 stations that are connected to communication paths being 
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multiplexed with a main path and a sub-path, the communication 
control system comprising: 

communication function implementing sections for 
implementing a coimnunication function, which are multiplexed 
so as to correspond with the main path and the sub-path 
respectively; 

a high-priority communication section for performing a 
high-priority communication via the communication function 
implementing section corresponding to any one of the 
multiplexed communication paths; and 

a low-priority communication section for performing a 
low-priority communication via the communication function 
implementing section corresponding to the sub-path, 

wherein the high-priority communication section and the 
low-priority communication section coexist in a single 
communication station . 
[0013] 

(2) A communication control system for controlling 
communications performed between a plurality of communication 
stations that are connected to communication paths being 
multiplexed with a main path and a sub-path, the communication 
control system comprising: 

first communication function implementing sections 
which are multiplexed so as to correspond with the main path 
and the sub-path respectively, and each of which implements 



a corninunication function in a physical layer of an OSI 

hierarchical model; 

second communication function implementing sections 
which are multiplexed so as to correspond with the multiplexed 
5 first communication function implementing sections 
respectively, and each of which implements a communication 
function in a data link layer of the OSI hierarchical model; 

a high-priority communication section for performing a 
high-priority communication via the communication function 
10 implementing section corresponding to any one of the 
multiplexed communication paths; and 

a low-priority communication section for performing a 
low-priority communication via the communication function 
implementing section corresponding to the sub-path, 
15 wherein the high-priority communication section and the 

low-priority communication section coexist in a single 
communication station. 
[0014] 

(3) The communication control system according to (2) , 
20 wherein the second communication function implementing 
section includes: 

an address storing section for storing MAC addresses 
corresponding to the high-priority communication section and 
the low-priority communication section respectively; 
25 a transmitting section which attaches the corresponding 
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MAC address to a communication frame depending on whether a 
transmission requestor is the high-priority communication 
section or the low-priority communication section, and 
transmits the communication frame to the communication path; 
5 and 

a receiving section which compares a destination MAC 
address of a communication frame received from the first 
communication function implementing section with the MAC 
address stored in the address storing section, and when a match 
10 is found in the comparison result, sends the received 
communication frame to the corresponding communication 
section. 
[0015] 

(4) The communication control system according to (2) 
15 or (3), further comprising: 

a multicast addr.ess storing section for storing a 
plurality of MAC multicast addresses, 

wherein when a destination MAC address of a communication 
frame received from the communication path matches with any 
20 one of the addresses stored in the MAC multicast address storing 
section, the second communication function implementing 
section sends the communication frame to the high-priority 
communication section, and 

otherwise the second communication function 
25 implementing section sends the communication frame to the 
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low-priority communication section. 
[0016] 

(5) The communication control system according to any 
one of (1) to (4), wherein units each including the 
high-priority communication section, the low-priority 
communication section and the communication function 
implementing sections, or units each including the 
high-priority communication section, the low-priority 
communication section, the first communication function 
implementing sections and the second communication function 
implementing sections are provided and multiplexed in a single 
communication station, and 

one unit serves as an active unit and the other unit serves 
as a standby unit. 
[0017] 

(6) A communication control system for controlling 
communications performed between a plurality of communication 
stations that are connected to communication paths being 
multiplexed with a main path and a sub-path, the commvihication 
control system comprising: 

a high-priority communication section for performing a 
high-priority communication normally via the main path; 

a low-priority communication section for performing a 
low-priority communication via the sub-path; 

a path diagnosing section for diagnosing a soundness of 
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the main path and the sub-path; and 

a switching section for switching the communication path 
of the high-priority communication to the sub-path when the 
main path is diagnosed as faulty as a result of diagnosis by 
the path diagnosing section. 
[0018] 

(7) The communication control system according to (6), 
wherein the path diagnosing section includes: 

a path state storing section for storing path state 
information of a path state from a home station to each 
communication station; and 

a fixed-cycle path diagnosing section for diagnosing the 
communication path from the home station to each communication 
station in a fixed cycle, 

wherein the fixed-cycle path diagnosing section 
registers the path state information obtained from the 
diagnosis result, in the path state storing section. 
[0019] 

(8) The communication control system according to (7) , 
wherein the fixed-cycle path diagnosing section includes a 
diagnosis packet transmitting section for broadcasting to 
other communication stations a path diagnosis packet including 
receive state information of path diagnosis packets from other 
communication stations, and 

on receiving a path diagnosis packet, the fixed-cycle 
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path diagnosing section registers in the path state storing 
section receive state information of the path diagnosis packet 
transmitted by the home station, the receive state information 
being included in the received path diagnosis packet, as the 
path state information of the communication path from the home 
station to a transmitting source of the path diagnosis packet. 
[0020] 

(9) The communication control system according to (7) 
or (8), wherein the fixed-cycle path diagnosing section 
broadcasts a path diagnosis packet in accordance with a 
multicast protocol of Internet Protocol, 

different IP multicast addresses are assigned to the main 
path and the sub-path respectively, and 

each communication station performs broadcasting by 
using the IP multicast address corresponding to a path selected 
between the main path and the sub-path, as a destination IP 
address, and receives a path diagnosis packet of which 
destination IP address matches with the IP multicast address 
corresponding to each of the main path and the sub-path. 
[0021] 

(10) The communication control system according to sny 
one of (6) to (9), further comprising: 

a data transmitting section which transmits data to 
another communication station, and retransmits the data when 
a normal reception response is not returned from the another 
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station within a predetermined time; and 

a data receiving section for returning a normal reception 
response to a transmitting source when data is normally 
received. 
[0022] 

(11) The communication control system according to (10), 

further comprising: 

a path state storing section for storing path state 
information of a path state from a home station to each 
communication station; 

a counting section for counting times of the data 
transmitting section retransmitting the data; and 

a registering section which, when a count value of the 
counting section reaches a specified value, determines the 
communication path as faulty and registers the path state 
information indicating that the path is faulty, in the path 
state storing section. 
[0023] 

(12) The communication control system according to (10) , 

further comprising: 

a counting section for counting times of the data 
transmitting section retransmitting the data; and 

a switching section which, when a count value of the 
counting section reaches a specified value, determines the 
communication path as faulty and switches the communication 



path . 
[0024] 

(13) The communication control system according to any 
one of (6) to (12), further comprising: 

5 a multiplexed communication station where units each 

including the high-priority communication section, the 
low-priority communication section, the path diagnosing 
section and the switching section are provided while being 
multiplexed, any one of the units serves as an active unit and 

10 the other unit serves as a standby unit, and a different address 
is assigned to the high-priority communication section of each 
unit, 

wherein" another communication station which performs a 
transmission to the multiplexed communication station 
15 performs communication by designating the active unit, and when 
failing to communicate with the active unit via any one of the 
multiplexed communication paths, retries to communicate by 
switching a designation to the standby unit. 
[0025] 

20 (14) The communication control system according to (13) , 

wherein the multiplexed communication station each includes 
a self diagnosing section, 

the self diagnosing section in the active unit halts a 
communication operation while placing the home unit in a 

25 standby state on detecting a failure. 
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the standby unit places the home unit in the active state 
so as to start a communication operation when the other unit 
halts the communication operation, and broadcasts to the other 
communication stations that the home unit has become the active 
5 unit, and 

each communication station includes a table storing 
information indicating which unit of the multiplexed 
communication station is active, performs transmission to the 
active unit while referencing the information stored in the 
10 table, and updates the information in the table when receiving 
the broadcast communication. 
[0026] 

(15) The communication control system according to (6) , 
wherein while the path diagnosing section detects a failure 

15 in the main path, the path diagnosing section broadcasts the 
failure in the main path to all communication stations in a 
fixed cycle. 
[0027] 

(16) The communication control system according to (15) , 
20 wherein when the low-priority communication section receives 

a broadcast notice indicating that the main path is faulty, 
the low-priority communication section controls a 
transmission so that a transmission count per unit time of 
low-priority communication is equal to or smaller than a 
25 predetermined value. 
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and when the broadcast notice is not received for equal 
to or more than a predetermined time, the low-priority 
communication section determines that the main path is restored 
to normal operation and halts the transmission control of 
5 making the transmission count be equal to or smaller than the 
predetermined value. 
[0028] 

(17) The communication control system according to (6) , 
wherein while the low-priority communication section 
10 recognizes the main path as faulty/ the low-priority 
communication section controls a transmission so that a 
■ transmission count per unit time of the low-priority 
communication is equal to or smaller than a predetermined 
value . 
15 [0029] 

(18) The communication control system according to any 
one of (6) to (17), wherein in a case where the low-priority 
communication section is recognizing the main path as faulty, 
while the sub-path is not under transmission, the low-priority 
20 communication section immediately performs the high-priority 
communication, and while the sub-path is not under transmission 
and there is no high-priority communication waiting to be 
transmitted, the low-priority communication section performs 
the low-priority communication. 
25 [0030] 
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(19) The communication control system according to (6) , 

further comprising: 

an authentication section which performs authentication 
between the high-priority communication sections in different 
communication stations so as to enable communication between 
the authenticated communication stations. 
[0031] 

(20) The communication control system according to (19) , 
wherein the authentication section includes: 

a public key generating section for generating an 
electronic public key to be exchanged between the home station 
and another communication stations from an electronic private 
key that is unique to the home station; 

a key transmitting section for broadcasting the 
generated public key to all communication stations; 

a common key generating section which generates an 
electronic common key that is unique to the home station and 
another communication station from a public key received from 
the another station and the private key of the home station, 
generates the electronic common key for each communication 
station, and stores the generated common key; 

an authentication packet transmitting section which 
performs at least either encryption of a packet or attachment 
of an authentication value to a packet by using the generated 
common key, and transmits at least either the encrypted packet 
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or the packet to which the authentication value is attached; 
and 

an authentication packet receiving section which 
performs at least either decoding of the received packet by 
5 using the common key or determination on whether reception is 
allowed based on the common key and the authentication value 
being attached to the packet. 
[0032] 

(21) The communication control system according to (20) , 
10 wherein the common key generating section generates the common 

key from the private key and the public key by using 
Dif f er-Hellman method. 
[0033] 

(22) The communication control system according to (20) , 

15 further comprising: 

a key update section for updating the common key by 
changing the private key per predetermined time; 

a confirming section which stores the common key just 
before update and a latest common key, confirms the 
20 authentication value by using the latest common key on 
receiving the packet, and in a case where the confirmation is 
determined as illegal, confirms the authentication value by 
using the common key just before update; and 

a decoding section for performing decoding of the packet 
25 by using either the common key just before update or the latest 
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common key by which the authentication value is confirmed as 
valid. 
[0034] 

(23) The communication control system according to any 
5 one of (1) to (22), wherein a router for performing a path 

control of the communication path in accordance with Internet 
Protocol is provided on the communication path, and the 
communication path includes a plurality of sub-networks being 
interconnected by the router. 
10 [0035] 

(24) The communication control system according to (23) , 
wherein a sole master station exists on the sub-network, 

the master station transmits an inter-network diagnosing 
frame including path state information on the paths between 
15 the home station and all another communication stations 
existing on the s\ib-network to which the home station belongs 
and path state information on the path between the home station 
and a master station existing on a sub-network to which the 
home station does not belong, and 
20 each of all communication stations on the plurality of 

sub-networks including the master station and the other 
communication stations includes: 

a path state storing section for storing path state 
information indicating whether the communication path from the 
25 home station to each of another communication stations is 
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sound; 

a diagnosing message receiving section which registers 
in the path state storing section the path state between the 
home station and the communication station existing on the 
sub-network to which the home station does not belong, based 
on the path state information included in the inter-network 
diagnosing frame; and 

a data transmitting section which selects either the main 
path or the sub-path in accordance with the information in the 
path state storing section, and performs transmission of data. 
[0036] 

(25) The communication control system according to (23) 

or (24), further comprising: 

a selecting section which generates a list of network 
addresses of all communication stations existing on the 
sub-network, and in a case where an address of the home station 
is the address that is uniquely determined among the list based 
on a predetermined condition, causes the home station to 
operate as the master station on the siib-network. 
[0037] 

(26) The communication control system according to any 
one of (1) to (25), wherein the high-priority communication 
section performs communication in accordance with a protocol 
dedicated to process control, and 

the low-priority communication section performs 
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communication in accordance with an open standard protocol . 
[0038] 

(27) The communication control system according to any 
one of (1) to {26), wherein the high-priority communication 
section transfers at least one of process data, an operation 

amount and an alarm, and 

the low-priority communication section performs at least 
one of image data transfer, file transfer and message transfer. 
[0039] 

As understood from the discussion, the invention 
provides the following advantages: 

(1) Critical communication section (high-priority 
communication section) to provide real time property and high 
reliability and open communication section (low-priority 
communication section) coexist in the same communication 
station. This provides a communication control system that 
satisfies a request for industrial applications and a request 
for open protocol communications at the same time. 

(2) When a communication path used for critical 
communications is faulty, the communication path used for 
critical communications is switched to a communication path 
for open communications. This prevents the traffic of open 
communications that is based on a standard protocol from having 
an influence on the real time property of critical 
communications . 



(3) open coimaunications are under way with some 
restrictions even while critical coitanunications are using a 
communication path for open communications. This avoids 
interruption of open communications. 
5 (4) A common key to serve as a common password between 

communication stations is generated and the common key is used 
for authentication. By providing critical communications 
with a common key, it is possible to prevent a security attack 
via standard protocol communications from having an influence 
10 on critical communications. 

(5) A communication path is being multiplexed while 
critical communications and standard protocol communications 
coexist in the same communication station, thus assuring high 
reliability. 

15 (6) There are provided a function to perform 

acknowledgment communications with an actual communication 
timing and a function to diagnose a path in a fixed cycle 
irrespective of a communication timing. This allows quick 
detection of a fault in a path, which minimizes the switchover 
20 time of communication path thus assuring the real time property 
of communications. 

(7) A router is provided on a communication path for 
interconnecting sub-networks. This readily supports network 
connection over a wide area or a large-scale network. 
25 (8) The same communication path and 
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transmitting/receiving section are shared in the same 
coitouunication station for communications that is based on an 
open standard protocol and critical communications. This 
reduces the component cost and wiring cost. 
5 BRIEF DESCRIPTION OF THE DRAWINGS 
[0040] 

[Fig. 1] It shows an exemplary configuration of a general 
distributed control system. 

[Fig. 2] It is a block diagram showing an embodiment of 

10 the invention. 

[Fig. 3] It is a block diagram showing communication 

function implementing section. 

[Fig. 4] It is a block diagram showing another embodiment 

of the invention. 

[Fig. 5] It is a block diagram showing another embodiment 

of the invention. 

[Fig. 6] It is a block diagram showing another embodiment 

of the invention. 

[Fig. 7] It is a block diagram showing another embodiment 

20 of the invention. 

[Fig. 8] It is a block diagram showing another embodiment 

of the invention. 

[Fig. 9] It is an explanatory drawing of switching of 
a control right in the embodiment shown in Fig. 8. 
25 [Fig. 10] It shows a particular configuration example 
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of authentication section. 

[Fig. 11] It is an explanatory drawing of the operation 
of the authentication section shown in Fig. 10. 

[Fig. 12] It is a block diagram showing another 
5 embodiment of the invention. 

[Fig. 13] It is an explanatory drawing of a procedure 
whereby a communication station obtains path state 
information . 

[Fig. 14] It is a block diagram showing another 
10 embodiment of the invention. 

[Fig. 15] It is a flowchart showing a transmission 

procedure . 

[Fig. 16] It is a flowchart showing a reception 
procedure . 

15 BEST MODE FOR CARRYING OUT THE INVENTION 
[0041] 

The invention will be detailed referring to drawings. 

[0042] 

(1) First embodiment 
20 Fig. 2 is a block diagram showing an embodiment of the 

invention. In Fig. 2, a communication path 10 is duplicated 
by a main path 11 and a sub-path 12. The communication path 
10 is for example the control bus of a distributed .control 
system. 

25 A communication station 20 and communication stations 
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31 to 3N are connected to the main path 11 and the sub-path 
12. 

[0043] 

The communication station 2 0 includes a unit 21 for 
5 performing communications. The embodiment in Fig. 1 includes 

a single unit. 

In the unit 21, high-priority communication section 211 
performs high-priority communications. Low-priority 
communication section 212 performs low-priority 

10 communications. 

High-priority communications transfer process data, an 
operation amount, an alarm and the like. Low-priority 
communications performs image data transfer, file transfer, 
message transfer, and the like. High-priority communications 
15 transfer more real time data while low-priority communications 
are less real time than high-priority communications. 

The high-priority communication section 211 performs 
communications in accordance with a protocol dedicated to 
process control. The low-priority communication section 
20 performs communications in accordance with an open standard 
protocol. The open standard protocol is for example IP 
(Internet Protocol) . 
[0044] 

Communication function implementing section 213a, 213b 
25 is duplicated. Communication function implementing section 
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214a, 214b is also duplicated. These communication function 
implementing section are provided to implement the 
communication function in a predetermined layer of an OSI (Open 
Systems Interconnection) hierarchical model. 
5 The communication function implementing section 213a, 

213b implements a communication function in the physical layer 
(first layer) of an OSI hierarchical model. 

The communication function implementing section 214a, 
214b implements a communication function in the data link layer 
10 (second layer) of an OSI hierarchical model. 

The 213a and 214a are provided to correspond to the main 
path 11. The 213b and 214b are provided to correspond to the 
sub-path 12. 
[0045] 

15 In the communication control system shown in Fig. 2, when 

communications are under way normally in which there is no 
failure in the communication, the high-priority communication 
section 211 uses the coitonunication function implementing 
section 213a and 214a to perform communications on the main 

20 path 11. The low-priority communication section 212 uses the 
communication function implementing section 213b and 214b to 
perform communications on the sub-path 12. 

When the main path 11 becomes faulty, the high-priority 
communication section 211 uses the communication function 

25 implementing section 213b, 214b and the sub-path 12 to perform 
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communications. In this case, low-priority communications 
are restricted. 
[0046] 

The high-priority communication section 211 can perform 
5 communications by using either the duplicated communication 
function implementing section 213a, 213b or the communication 
function implementing section 214a, 214b. The low-priority 
communication section 212 can use only its corresponding 
communication function implementing section 213b and 214b. 
10 In this way, the high-priority communication section 211 

and the low-priority communication section 212 coexist in the 
same communication station. 
[0047] 

According to the embodiment shown in Fig. 2, the 
15 high-priority communication section to provide real time 
property and high reliability and low-priority communication 
section that uses an open standard protocol coexist in the same 
communication station. This provides a communication control 
system that satisfies a request for industrial applications 
20 and a request for open protocol communications at the same time . 
[0048] 

Fig. 3 shows an exemplary configuration of communication 
function implementing section for implementing a 
communication function in the data link layer. 
25 The configuration will be described taking as an example 
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the ccniaunication function implementin, section 214a. The 
connuunication (unction implementing section 214b has the same 

configuration . 

in Fig. 3, an address storing section 215 stores a MAC 

5 address corresponding to each of the high-priority 
communication section 211 and low-priority communication 
section 212. A single MAC (Media Access Control) address is 
assigned to each of the high-priority communication section 
211 and low-priority communication section 212. 

10 [0049] 

Transmitting section 216 appends a corresponding MAC 
address to a communication frame depending on whether the 
transmission requestor is the high-priority communication 
section 211 or low-priority communication section 212 and 
15 transmits the communication frame to a communication path. 

Receiving section 217 compares the destination MAC 
address of the communication frame received from the 
communication function implementing section 213a with the MAC 
address stored by the address storing section 215, and in case 
20 a match is found in the comparison result, passes the received 
communication frame to the pertinent communication section 
(high-priority communication section 211 or low-priority 
communication section 212) . 
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[0050] 

A multicast address storing section to store a plurality 
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of MAC multicast addresses may be provided in place of the 
address storing section 215. 

in this configuration, the receiving section 217 of the 
coxmnunication function implementing section 214a, in case the 
5 destination MAC address of the communication frame received 
from the main path 11 matches any one of the addresses present 
in the MAC multicast address storing section, passes the 
communication frame to the high-priority communication 
section 211 and otherwise passes the communication frame to 
10 the low-priority communication section 212. 

In this way, high-priority communications uses a MAC 
multicast address for communications. 
[0051] 

(2) Second embodiment 

Fig. 4 is a block diagram of another embodiment of the 
invention. In Fig. 4, same components as the preceding ones 
are given the same signs. In this embodiment, the unit is 
duplicated. 

A communication station 22 includes a dual unit 21a and 
20 21b. The unit 21a includes high-priority communication 
section 211, low-priority communication section 212, 
communication function implementing section 213a, 213b, 214a, 
214b. The unit 21b has the same configuration as the unit 21a. 
in the illustrated example, the unit 21a serves as an active 
25 unit and the unit 21b serves as a standby unit. 
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[0052] 

The active unit 21a performs communications. When the 
active unit 21a turns faulty, the unit 21a halts communications 
and places itself in the standby state. The standby unit 21b 
switches to the active unit and takes over the communications. 

In this embodiment, the unit is duplicated thus enhancing 
the reliability of communications. The unit may be 
triplicated or further being multiplexed. 
[0053] 

(3) Third embodiment 

Fig. 5 is a bloclc diagram of another embodiment of the 
invention. 

In Fig. 5, a communication station 40 is connected to 
a main path 11 and a sub-path 12. 

High-priority communication section 401 performs 
high-priority communications by using the main path 11. 

Low-priority communication section 402 performs 
low-priority communications by using the sub-path 12. 

Path diagnosing section 403 diagnoses the soundness of 
the main path 11 and the sub-path 12. 

Switching section 404 switches the communication path 
between the high-priority communication section 401 and its 
distant party based on the diagnosis result of the path 
diagnosing section 403. 
[0054] 
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Restricting section 405 restricts communications by the 
low-priority communication section 402 based on the diagnosis 
result of the path diagnosing section 403. For example, the 
restricting section 405 restricts the transmission band of the 
low-priority communication section 402. 

Transmitting/Receiving section 406, on receiving a 
transmission request from the high-priority communication 
section 401, sequentially transmits communication frames to 
the main path 11 and passes the communication frames received 
from the main path 11 to a destination. 

Transmitting/Receiving section 407, on receiving a 
transmission request from the low-priority communication 
section 402, sequentially transmits communication frames to 
the sub-path 12 and passes the communication frames received 
from the sub-path 12 to a destination. 

The transmitting/receiving section 406 and 407 
respectively correspond to the communication function 
implementing section 213a, 214a and 213b, 214b in the 
embodiment shown in Fig. 1. 
[0055] 

In the embodiment shown in Fig. 5, in case the path 
diagnosing section 4 03 has determined that the main path 11 
is normal, the switching section 404 selects the main path 11 
as the communication path of the high-priority communication 
section 401. In case the path diagnosing section 403 has 



determined that the main path 11 is faulty, the switching 
section 4 04 switches the communication path of the 
high-priority communication section 401 to the sub-path 12. 
In case the path diagnosing section 403 has determined that 
the main path 11 is normal, the restricting section 405 does 
not restrict the transmission band of the low-priority 
communication section 402. In case the path diagnosing 
section 4 03 has determined that the main path 11 is faulty, 
the restricting section 405 restricts the transmission band 
of the low-priority communication section 402. 

The path diagnosing section 403 also diagnoses the 

sub-path 12 and, on detecting a fault, generates an alarm. 

[0056] 

The path diagnosing section 4 03, on determining that the 
main path 11 is normal, broadcasts the fault in the main path 
to all communication stations. The low-priority 

communication section 402, on receiving the broadcast notice 
that the main path is faulty, controls transmissions so that 
the transmission count per unit time of low-priority 
communications will drop below a predetermined value. When 
the broadcast notice that the main path is faulty is not 
received for a predetermined time, the low-priority 
communication section 4 02 determines that the main path is 
restored to normal operation and halts the transmission control 
whereby the transmission count is kept below the predetermined 



value . 
[0057] 

The low-priority communication section 402 may control 
transmissions so that the transmission count per unit time of 
low-priority conmiuni cat ions will drop below a predetermined 
value while it is recognizing that the main path 11 is faulty, 
also in the absence of a broadcast notice that the main path 
is faulty. 
[0058] 

The low-priority communication section 402 immediately 
performs high-priority communications when the sub-path 12 is 
not transmitting and performs low-priority communications 
when the sub-path 12 is not transmitting and there are no 
high-priority communications waiting to be transmitted, while 
it is recognizing that the main path 11 is faulty. 
[0059] 

According to the embodiment shown in Fig. 5, the 
high-priority communication section 401 and the low-priority 
communication section 402 respectively use separate path while 
the communication path is normal, thus sharing communications 
in a non-restricted band. 

When the main path turns faulty, the communication path 
of the high-priority communication section 401 is switched to 
the sub-path and the low-priority communication section 402 
is subjected to restriction on the transmission band. This 



allows high-priority communications continues while 
maintaining the corresponding band, thus keeping the real time 
property. 

When the main path is faulty, the communication path of 
the high-priority communication section 401 is switched to the 
sub-path although the low-priority communication section 402 
is capable of performing communications in a restricted band. 
[0060] 

(4) Fourth embodiment 

Fig. 6 is a block diagram of another embodiment of the 
invention. Fig. 6 shows a particular configuration example 
of path diagnosing section. 

In Fig. 6, the path state storing section 501 stores path 
state information on whether the communication path from the 
home station is sound per interface and per distant station. 
[0061] 

Transmitting section 502 receives a transmission request 
from the high-priority communication section 401, references 
the path state information in the path state storing section 
501, selects a sound communication path and transmits data 
thereon. 

The transmitting section 502, in case a normal reception 
response is not received within a predetermined after data 
transmission, assumes the communication path as faulty and 
reflects this information on the path state information in the 
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path state storing section 501. 

The receiving section 503 receives data from the distant 
station and passes the received data to the high-priority 
communication section 401. When receiving data from the 
distant communication state, the receiving section 503 returns 
a normal reception response to the distant communication 
station. 

In this way, the transmitting section 502 and the 
receiving section 503 perform acknowledgment communications 
whereby diagnosis is made based on whether a normal reception 
response is received in return for data transmission. 
[0062] 

Fixed cycle path diagnosing section 504 diagnoses the 
state of the path from the home station cyclically per interface 
and per distant station, and registers the diagnosis result 
in the path state storing section 501. 

The fixed cycle path diagnosing section 504 includes 
diagnosis packet transmitting section 505. The diagnosis 
packet transmitting section 505 broadcasts a path diagnosis 
packet including the information on the receiving state of a 
path diagnosis packet from another communication station to 
the other stations. 

The fixed cycle path diagnosing section 504, on receiving 
a path diagnosis packet, registers in the path state storing 
section 501 the information on the receiving state of a path 



diagnosis packet transmitted by the home station included in 
the received path diagnosis packet as the path state 
information on the communication path from the home station 
to the transmission source of the path diagnosis packet. 
[0063] 

An interface 506 makes intervention in the 
communications between a main path 11 and a communication 
station 50. The interface 507 makes intervention in the 
communications between a sub-path 12 and the communication 
station 50. 
[0064] 

According to the embodiment shown in Fig. 6, a function 
to perform acknowledgment communications with an actual 
communication timing and a function to diagnose a path in a 
fixed cycle irrespective of a communication timing are provided. 
This allows quick detection of a fault in a path. 
[0065] 

The fixed cycle path diagnosing section 504 may broadcast 
a path diagnosis packet in accordance with the multicast 
protocol of the IP (Internet Protocol) . In this case, a 
separate IP multicast address is assigned to each of the main 
path 11 and the sub-path 12. Each communication station 
performs broadcasting by using as a destination IP address the 
IP multicast address corresponding to a path selected between 
the main path and sub-path and receives a path diagnosis packet 



where the destination IP address matches the IP multicast 
address corresponding to the main path or sub-path. 

With this operation, simultaneous communications to a 
particular communication station are made possible thus 
5 reducing the number of communication circuits. By using the 
IP multicast protocol, when networks are interconnected via 
a router, a sending station may communicate to a communication 
station on a network where the home station exists as well as 
a communication station on a network connected via the router. 
10 This minimizes the switchover time of communication path thus 
assuring the real time property of communications. 
[0066] 

(5) Fifth embodiment 

Fig. 7 is a block diagram showing another embodiment of 
15 the invention. 

In Fig. 1, protocol section 61 performs communication 
control of a main path 11 and a sub-path 12 duplicated in 
accordance with a general-purpose connectionless protocol. 
The general-purpose connectionless protocol is for example 
20 UDP/IP (User Datagram Protocol/Internet Protocol) . 
[0067] 

UDP/IP is a higher level protocol of IP in a protocol 
group of TCP/IP. UDP/IP belongs to the transport layer and 
is defined in RFC768. UDP is a connectionless protocol and 
25 does not have such functions as connection management. 
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acknowledgment, sequence, window control and flow control TCP 
possesses . 
[0068] 

In other words, UDP/IP is substantially a protocol 
5 whereby an IP packet may be used by an application of the distant 
station. Including a smaller number of functions, UDP/IP is 
subject to a lower load thus allowing high-speed data 
communications. There is no guarantee that data is delivered 
to the distant party so that it is necessary to provide means 
10 for assuring reliability. 

In the invention, reliability is assured by performing 
acknowledgment communications over UDP/IP. 
[0069] 

In a transmitting/receiving section 60, switching 
15 section 601 switches a data transmitting port between the dual 
communication path (main path 11 and sub-path 12) . 

Data transmitting section 602 transmits the send data 
of the high-priority communication section 401 to the switching 
section 601. 

20 Data receiving section 603 receives data from the main 

path 11 or sub-path 12 and transmits it to the high-priority 
communication section 401. 
[0070] 

A timer 604 is activated by a signal TR generated by data 
25 transmission by the data transmitting section 602 and reset 
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by a signal RS generated when the data receiving section 603 
has received a normal reception response. The timer 604, on 
counting up to a specified value, transmits a time-up signal 
TU to the data transmitting section 602 to make a retransmission 
request. Receiving the time-up signal TU, the data 
transmitting section 602 retransmits the data. 
[0071] 

Counting section 605 counts the number of time-up signals 
TU and, when a predetermined value is reached, originates a 
switching signal SW to the switching section 601 to switch over 
the communication path. 

Path state storing section 606 stores information on the 
state of the path from the home station to each communication 
station. 

Registering section 607 determines that the 
communication path is faulty when the count value of the 
counting section 605 has reached a specified value and 
registers in the path state storing section 606 the path state 
information indicating that the path is faulty. 
[0072] 

According to the embodiment shown in Fig. 7, it is 
possible to assure reliability while enjoying the high-speed 
data transmission unique to a connectionless protocol. The 
general versatility of the connectionless protocol provides 
an open control bus at the same time. 
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A communication path is switched over when the data 
retransmission count has reached a predetermined value. It 
is thus possible to prevent switchover of path due to a 
temporary fault in a communication path. It is also possible 
to switch over a path while identifying a transient fault and 
a permanent fault. 
[0073] 

(6) Sixth embodiment 

Fig. 8 is a block diagram of another embodiment of the 
invention. 

In Fig. 8, a multiplexed communication station 70 
includes a multiplexed unit 71a, 71b. In the illustrated 
example, the unit is duplicated. The units 71a, 71b each has 
the same configuration as the communication station 40 shown 
in Fig. 4. One of the dual units 71a and 71b serves as an active 
unit and the other serves as a standby unit . A separate address 
is assigned to the low-priority communication section of each 
unit. Each unit is connected to the multiplexed communication 
path (main path and sub-path) . 
[0074] 

Assume that the unit 71a is active and the unit 71b is 
standby. Another communication station 72 transmitting to the 
multiplexed communication station 70 performs communications 
to the active unit 71a. When it has failed in communications 
with the active unit 71a on whichever multiplexed communication 
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path, the communication station 72 retries communications to 

the standby unit 71b. 

[0075] 

Fig. 9 is an explanatory drawing of switching of a control 
right in the embodiment shown in Fig. 8. 

Each unit 71a, 71b includes self diagnosing section 73. 

Assume that the unit 71a is active and the unit 71b is 
standby. 

The self diagnosing section 73 in the active unit 71a, 
on detecting a fault, places itself in the standby state and 
halts communications. When the unit 71a has halted 
communications, the standby unit 71b places itself in the 
active state and starts, communications and broadcasts to the 
other communication stations that it is now. an active unit. 

The other communication station 72 includes a table 7 4 
storing information on which unit of the multiplexed 
communication station 70 is active. The communication station 
72 references the information stored in the table 74 to perform 
transmission to the active unit . On receiving a broadcast from 
the unit 71b, the communication station 72 updates the 
information in the table 74. 
[0076] 

In the embodiment shown in Fig. 8, a multiplexed 
communication station assures highly reliable communications. 
[0077] 



39 



(7) Seventh embodiment 

Authentication section may be provided in the 
communication station 40 in Fig. 5. The authentication 
section performs authentication between high-priority 
communication section in separate communication stations and 
enables communications between authenticated communication 
stations. 

Fig. 10 shows a particular configuration example of 
authentication section . 

While the configuration of authentication section is 
shown in Fig. 10 for convenience of explanation, the 
communication station 8 0 also includes the components of the 
communication station 40. 
[0078] 

Public key generating section 801 generates an 
electronic public key K2 to be exchanged between the home 
station and another communication station from an electronic 
private key Kl unique to the home station. 

Key transmitting section 802 broadcasts the generated 
public key K2 to all communication stations. 

Common key generating section 8 03 generates, on a per 
communication station basis, an electronic common key K3 unique 
to communication stations 80 and 81 from a public key K2' 
received from the other station 81 and the private key Kl of 
the home station and stores the generated common key in the 



communication station 80. The common key generating section 
803 uses for example the Dif f er-Hellman method to generate a 
common key from a private key and a public key. 
[0079] 

Authentication packet transmitting section 804 uses the 
generated common key K3 to encrypt a packet or appends an 
authentication value to a packet. The authentication packet 
transmitting section transmits the encrypted packet or the 
packet to which the authentication value is attached to another 
communication station 81. 

Authentication packet receiving section 805 encrypts a 
packet received from the other communication station 81 by 
using the common key K3 or determines whether reception is 
allowed based on the common key and the authentication value 
attached to the packet. 
[0080] 

Key update section 805 updates a private key for every 
predetermined time to update a common key. 

Confirming section 806 stores a common key just before 
update and a latest common key, and confirms an authentication 
value by using the latest common key on receiving a packet. 
In case the confirmation is determined illegal, the confirming 
section 806 confirms the authentication value by using the 
common key just before update. 

Decoding section 807 decodes a packet by using the common 



key just before update or the latest common key for which the 

authentication value is confirmed valid. 

[0081] 

Fig. 11 is an explanatory drawing of the operation of 
the authentication section shown in Fig. 10. 

In a communication station 80, public key generating 
section 801 generates a public key K2 from the private key Kl 
of the home station and broadcasts the generated public key 
K2 to all communication stations. 

In a communication station 81 also, the public key 
generating section 801 generates a public key K2' from the 
private key Kl' of the home station and broadcasts the generated 
public key to all communication stations. 
[0082] 

In the communication station 80, common key generating 
section 803 generates an electronic common key K3 unique to 
the communication stations 80 and 81 from the public key K2' 
received from the communication station 81 and the private key 
Kl of the home station. 

Similarly, in the communication station 81, the common 
key generating section 803 generates an electronic common key 
K3' unique to the communication stations 80 and 81 from the 
public key K2 received from the communication station 80 and 
the private key Kl' of the home station. 

In this way, each communication station generates and 



stores a common key serving as a common password between itself 

and another communication station, 

[0083] 

In the communication station 80, authentication packet 
5 transmitting section 8 04 uses the generated common key K3 to 
encrypt a packet or adds an authentication value to a packet. 
The authentication packet transmitting section 804 then 
transmits the encrypted packet or the packet to which the 
authentication value is attached to the communication station 
10 81. 

In the communication station 81, authentication packet 
transmitting section 805 encrypts a packet received from the 
communication station 8 0 by using the common key K3' or 
determines whether reception is allowed based on the common 
15 key K3' and the authentication value attached to the packet. 
[0084] 

According to the embodiment shown in Fig. 10, a 
communication station to which a public key is not transmitted 
cannot generate a common key so that it cannot wiretap or tamper 

20 a transmitted packet. This assures the security of 
communications. By providing high-priority communications 
with a common key, it is possible to prevent a security attack 
in open low-priority communications from having an influence 
on high-priority communications. 

25 [0085] 
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(8) Eighth embodiment 

Fig. 12 is a block diagram showing another embodiment 
of the invention. 

In the embodiment shown in Fig. 12, routers 90, 91 to 
perform path control of a communication path in accordance with 
Internet Protocol are provided on a main path and a sub-path 
respectively. The main path is composed of sub-networks 11a, 
lib interconnected by the router 90. The sub-path is composed 
of sub-networks 12a, 12b interconnected by the router 91. 
[0086] 

A sole master station exists on a sub-network. The 
master station transmits an inter-network diagnosing frame. 
The inter-network diagnosing frame includes information on the 
path between the home station and each of the other 
communication stations present on a sub-network to which the 
home station belongs and information on the path between the 
home station and the master station present on a sub-network 
to which the home station does not belong. 

In Fig. 12, the communication station 20 serves as the 
master station on the sub-network 11a, 12a. The communication 
station 23 serves as the master station on the sub-network lib, 

12b. 

[0087] 

In the communication station 20, path state storing 
section 221 stores path state information indicating whether 



the communication path from the home station to another 
communication station is sound. 

Diagnosing message receiving section 222 registers in 
the path state storing section 221 the path state between the 
home station and a communication station present on a 
sub-network to which the home station does not belong based 
on the path state information included in the inter-network 
diagnosing frame. In the example shown in Fig. 20, the 
diagnosing message receiving section 222 registers the path 
state between the communication station 2 0 and a communication 
station on the sub-network lib, 12b. 

Data transmitting section 223 selects either the main 
path or sub-path in accordance with the information in the path 

state storing section 221 and transmits data. 

The path state storing section 221, the diagnosing 
message receiving section 222 and data transmitting section 

223 are provided in a master station and the other communication 

stations . 

[0088] 

Selecting section 224 preparing a list of the network 
addresses of all communication stations present on a 
sub-network and, in case the address of the home station is 
one uniquely determined from predetermined conditions, causes 
the home station to operate as the master station on the 
sub-network. The address uniquely determined refers to, for 



example, the highest address, the lowest address, and the like, 
[0089] 

Fig. 13 is an explanatory drawing of a procedure whereby 
a coitmiunication station obtains path state information. 

In Fig. 13, communication stations other than the master 
station are called general stations. Sub-networks A and B are 
interconnected. On the sub-network A, a master station a and 
a general station a' are interconnected. On the sub-network 
B, a master station b and a general station b' are 
interconnected . 
[0090] 

In such a network, processing is made in the following 
procedure : 

The general station a' cyclically transmits via 
multicasting the reception state from each station in the home 
sub-network to each of the dual paths in the home sub-network. 

Each station, having received the reception state, 
acquires path state information 1 from the home station to the 
distant station. 

The master station in each sub-network cyclically 
transmits via multicasting the reception state from the master 
station in another sub-network and the reception state from 
each station in the home sub-network to each of the dual paths. 

Each station, having received the reception state, 
acquires path state information 2 between the master stations 



based on the reception state coming from the master station 
in another sub-network* 

Each station acquires path state information 3 to each 
station in the master station based on the reception state in 
the source sub-network. 

In this way, each communication station can determine 
the soundness of each of the dual paths from the path state 
information 1, 2, 3. 
[0091] 

The embodiment shown in Fig. 12 provides the following 
advantages : 

(a) Each of the stations can determine the soundness of 
a path. 

(b) A general station and a master station perform 
multicast transmission to obtain information on a path to the 
outside of the home sub-network. 

(c) In case the path state information of the home station 
is fault without exception or in case communications are 
interrupted for a predetermined time, a fault in the home 
station is assumed thus allowing use for troubleshooting also. 
[0092] 

(9) Nineth embodiment 

Fig. 14 is a block diagram showing another embodiment 
of the invention. 

In this embodiment, high-priority communications and 



low-priority communications share a single communication 
path. 

A communication station 100 includes protocol interface 
section 101 for performing high-priority communications and 
protocol interface section 102 for performing low-priority 
communications . 

A higher-rank host computer (not shown) communicates 
with the protocol interface section 101 in accordance with a 
high-priority communication protocol and communicates with 
the protocol interface section 102 in accordance with a 
low-priority communication protocol . 
[0093] 

Communication function implementing section 103 and 104 
are provided to correspond to the protocol interface section 
101 and 10.2, respectively. These communication function 
implementing section 103, 104 implements a communication 
function in the data link layer (second layer) of an OSI 
hierarchical model. 

Priority control section 105 controls transmission from 
the communication function implementing section 103, 104 based 
on the priority of the protocol. The communication function 
implementing section 103, 104 splits a frame into sub-frames 
below a certain frame length and transmits the resulting 
sub-frames to the priority control section 105. 

Communication function implementing section 106 
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implements a communication function in the physical layer 
(first layer) of an OSI hierarchical model. High-priority 
communications and low-priority communications share the 
communication function implementing section 106, 

The communication station 100 is connected to the 
communication path 150. The communication path 150 is shared 
by low-priority communications and high-priority 
communications . 
[0094] 

In the communication function implementing section 103, 
a MAC address register 121 stores a MAC address corresponding 
to a protocol for high-priority communications . Transmission 
accepting section 122 accepts a frame transmitted by the 
communication station 100. Reception accepting section 123 
accepts a frame received by the communication station 100. 

Communication function implementing section 104 has a 
similar configuration. The MAC address register 121 of the 
communication function implementing section 104 stores a MAC 
address corresponding to a protocol for low-priority 
communications. 
[0095] 

Operation of the embodiment show in Fig. 14 will be 
described. 

Fig. 15 is a flowchart showing a transmission procedure . 
In the transmission procedure of high-priority 



communications, transmission accepting section 122 appends 
the MAC address of a MAC address register 121 to the source 
address part of the transmission frame received from protocol 
interface section 101 and temporarily stores the frame. 

In case the transmission allowing signal output from the 
priority control section 105 is High, the transmission 
accepting section 122 passes the frame to the priority control 
section 105, which immediately passes the frame to a 
communication function implementing section 106. In case the 
transmission allowing signal output from the priority control 
section 105 is Low, the transmission accepting section 122 
keeps storing the frame and causes the frame to wait until the 
transmission allowing signal is driven High. The priority 
control section 105 controls the transmission allowing signal 
based on the priority assigned to the protocol for 
high-priority communications . 

Transmission processing of low-priority communications 

is the same as above. 

[0096] 

Fig. 16 is a flowchart showing a reception procedure. 

In the reception processing of high-priority 
communications, reception accepting section 123 compares the 
destination address of the reception frame received from the 
communication function. implementing section 106 and the MAC 
address stored in a MAC address register 121. In case a match 
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is not found, the frame is discarded. In case a match is found, 
the frame is passed to protocol interface section 101. 

Reception processing of low-priority communications is 
the same as above. 
[0097] 

The priority control section 105 classifies 
communications into high-priority protocol communications and 
low-priority protocol communications. The priority control 
section 105 always gives a transmission right to the 
transmission acceptance of a frame of a high-priority protocol 
unless another frame is being transmitted. The priority 
control section 105 gives a transmission right to the 
transmission acceptance of a frame of a low-priority protocol 
unless another frame is being transmitted and no frames are 
waiting at the transmission acceptance of a high-priority 
protocol, and immediately causes the frame to be transmitted. 

The priority control section 105 controls transmission 
of a transmission frame by using the transmission allowing 
signal so that the transmission count of transmission frames 
per certain time from the communication function implementing 
section 103, 104 will drop below a predetermined value assigned 
to each of the communication function implementing section 103, 

104. 

[0098] 

According to the embodiment shown in Fig. 14, both a 
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network using an open standard protocol and a network using 
a unique protocol to implement real time communications are 
necessary in the communications between hosts, interfaces for 
these protocols are provided in the same communication station 
and the protocol processing function share the same 
communication function implementing section and communication 
path. This reduces the hardware cost and cable laying cost. 
[0099] 

In the above embodiments, a communication station is 
present in the operation monitoring apparatus in a distributed 
control system. 
[0100] 

While the embodiments employ a duplicated unit, the unit 
may be triplicated or further being multiplexed. 

In the multiplexing of triplication or above, a single 
main path and a plurality of sub-paths constitute a 
communication path. 
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